feat: add securityContext for containers

exclude field already set on Pod level, include only container level settings
mr-karan · Dec 6, 2023 · 3a54d0e · 3a54d0e
1 parent 0805d82
commit 3a54d0e
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/contrib/helm/calert/templates/deployment.yaml b/contrib/helm/calert/templates/deployment.yaml
@@ -43,6 +43,12 @@ spec:
             {{- range .Values.args }}
             - {{ . | quote }}
             {{- end }}
+        {{- if .Values.securityContext.enabled }}
+          {{- with omit .Values.securityContext "enabled" "runAsGroup" "runAsUser" "runAsNonRoot" "windowsOptions" }}
+          securityContext:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+        {{- end }}
           ports:
           - containerPort: {{ .Values.service.port }}
             protocol: TCP